Who we are. This policy is operated by MaciaLux ("we", "us", "our", "the Platform"). Contact: hello@macialux.co.uk.
What we are. MaciaLux is an advertising directory for independent massage therapists; we do not provide, perform, arrange or take payment for the treatments themselves.
1. Data controller
For the purposes of data-protection law, MaciaLux is the data controller for personal data processed through the site. Data-protection contact: hello@macialux.co.uk.
2. What we collect
Therapists/advertisers: name, contact details, business details, profile content, photos, qualifications/insurance/ID documents you provide for vetting, payment/billing details (processed by our payment providers — see clause 6), correspondence.
Clients: we do not collect personal details from clients. Clients browse listings and contact therapists directly off-platform. The only client data we process is a browser push-notification subscription, if you choose to enable it (device/browser-level — see Cookie Policy).
All visitors: technical/usage data (IP, device, pages viewed) via cookies/analytics — see Cookie Policy.
3. Why we use it & legal basis
- To provide and manage listings and the platform — contract.
- To vet therapists and maintain trust/safety — legitimate interests (and legal obligation where applicable).
- To take advertising payments — contract.
- To send push notifications to clients who opt in — consent.
- For marketing to therapists/advertisers — consent or legitimate interests (with opt-out).
- For security, fraud prevention, legal compliance — legitimate interests / legal obligation.
4. Sensitive data note
Therapist qualification, insurance and ID documents may be sensitive.
5. Sharing
- Therapist public listing content/photos is, by design, displayed publicly on the site and may appear in search engines and AI tools.
- We share data with service providers (hosting, payment processing, email, analytics) under appropriate terms.
- We do not sell personal data.
- We may disclose where legally required.
6. Payments
Advertising payments are processed by third-party providers (e.g. GoCardless, Stripe). We do not store full card/bank details; those providers process them under their own terms and privacy policies.
7. Retention
We keep personal data only as long as needed for the purposes above or as law requires.
8. Your rights
You have rights to access, correct, delete, restrict, object to, and port your data, and to withdraw consent, subject to law. To exercise them: hello@macialux.co.uk.
9. Security
We use appropriate technical and organisational measures to protect personal data. No system is perfectly secure.
10. Changes & contact
We may update this policy; current version on the site. Questions: hello@macialux.co.uk.